yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2026-50263
Component Overview
Vulnerability Overview
Name
CVE-2026-50263
Source
NVD (
link
)
Debian (
link
)
Description
A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.
CWEs
CWE-416
Published Date
Jun 5, 2026
Updated Date
Jun 24, 2026
Workaround
-
Advisories
https://access.redhat.com/security/cve/CVE-2026-50263
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485388
Issue Tracking
https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05
Patch
https://lists.x.org/archives/xorg-announce/2026-June/003702.html
Mailing List
https://redhat.atlassian.net/browse/PSIRTSUPT-16950
Permissions Required
Analysis
#
Affected Component
Analysis
xwayland
Exploitable
Vulnerability Ratings
#
5.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
xwayland
buildroot
2025.02.x
24.1.12
Not Affected
xwayland
buildroot
master
24.1.12
Not Affected
xwayland
yocto
master
24.1.12
Not Affected
xwayland
yocto
scarthgap
23.2.5
Exploitable